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<SCWKnowledgeBase schemaLocation="W2k3.xsd"> 
- <Roles> 



- <Role Type="Server"> 

<Name>WEB</Name> 

- < Selected > 

<Maximum Value="FALSE" /> 
<Typical Value="CUSTOM" FunctionName= 
"SvcapisServingWebPages" DLLName= M scwhlp.dll" /> 
</Selected> 

- <Services> 

- <Service> 

<Name>IISAdmin</Name> 
</Service> 

- <Service> 

<Name>HTTPFilter</Name> 
</Service> 

- <Service> 

<Name>W3SVC</Name> 
</Service> 
</Services> 
-<Ports> 
- <Port> 

<Name>HTTP</Name> 
<Type>lnbound</Type> 
</Port> 
- <Port> 

<Name>HTTPS</Name> 
<Type> Inbound </Type> 
</Port> 
</Ports> 
</Role> 
</Roles> 
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- <Ports> 



- <Port> 

<Name>HTTP</Name> 
<Number>80</Number> 

- <Protocols> 
- <Protocol> 

<Name>TCP</Name> 
</Protocol> 



<Name>HTTPS</Name> 
<Number>443</Number> 
- <Protocols> 
- <Protocol> 

<Name>TCP</Name> 
</Protocol> 
</Protocols> - 
</Port> 
</Ports> 
</SCWKnowledgeBase> 



</Protocols> 
</Port> 
- <Port> 
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- <Role Type="Server" SourceKB="W2k3.xml" 
<Name>WEB</Name> 
<Satisfiable>FALSE</Satisfiable> 
<Selected>FALSE</Selected> 
- <Services> 

- <Service> 

<Name>IISAdmin</Name> 
</Service> 

- <Service> 

<Name>HTTPFilter</Name> 
</Service> 

- <Service> 

<Name>W3SVC</Name> 
</Service> 
</Services> 
- <Ports> 

- <Port> 

<Name>HTTP</Name> 
<Type> Inbound </Type> 
</Port> 
- <Port> 

<Name>HTTPS</Name> 
<Type>lnbound</Type> 
</Port> 
</Ports> 
</Role> 
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<SecurityPolicy> 

- <Extension ID="{A1D76559-8DB5-3F05-9821- 
B495A565076C}" Name="SCE"> 

<Service Name="Alerter" StartupMode="Disabled" /> 
<Service Name="browser" StartupMode="Disabled" /> 
<Service Name="ComSysApp" StartupMode="Manual" /> 
<Service Name="CryptSvc" StartupMode="Automatic" /> 
<Service Name="EventLog" StartupMode-'Automatic" /> 
<Service Name="ProtectedStorage" StartupMode= 
"Automatic" /> 

<Service Name="uploadmgr" StartupMode="Disabled" /> 
</Extension> 

<Extension ID="{78A2BE03-EFE1-4695-96B8-33C477241 BC9}" 
Name="IPSec"> 

- <Filters Type="Destination"> 

- <lnterface> 

<IPAddress>1 57.59. 1 32.0</IPAddress> 
<SubnetMask>255.255.252.0</SubnetMask> 

- <PortExemptions> 

- <Port> 

<Number>80</Number> 
<Type>lnbound</Type> 

- <Protocols> 

<Protocol>TCP</Protocol> 
</Protocols> 
</Port> 

- <Port> 

<Number>443</Number> 
<Type>lnbound</Type> 

- <Protocols> 

<Protocol>TCP</Protocol> 
</Protocols> 
</Port> 

</PortExemptions> 

</lnterface> 
</Filters> 
< Permitted /> 
<Trusted /> 

<DynamicExemptions> 
<Type>SUS</Type> 
</DynamicExemptions> 
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- <ProtocolExemptions> 



<Type> ICM P</Type> 
</ProtocolExemptions> 

- <Security> 

- <Authentication> 

<Kerberos>Yes</Kerberos> 
</Authentication> 
</Security> 
</Extension> 
- <PolicyAuthoringData> 
- <Extension ID="{43F65325-1C59-4748-A455- 
81F4146B209F}" Name="SCW"> 
<PrototypeMachine Name="TEST" /> 

- <Selection> 

- <Roles> 
- <Role> 

<Name>File</Name> 
</Role> 



- <Role> 

<Name>WindowsUpdate</Name> 
</Role> 
</Roles> 
- <Tasks> 

- <Task> 

<Name>Backup</Name> 
</Task> 
-<Task> 

<Name>ErrorReporting</Name> 
</Task> 
-<Task> 

<Name>RemotePrinting</Name> 
</Task> 
</Tasks> 
</Selection> 
</Extension> 
</PolicyAuthoringData> 
</SecurityPolicy> 




- <Role> 

<Name>WEB</Name> 
</Role> 
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